cancel
Showing results for 
Search instead for 
Did you mean: 

Function group SRFC and RFC_PING / RFC_SYSTEM_INFO requests

cysecfg
Explorer
0 Kudos
153

Dear community, 

We are evaluating monitoring and security aspects on development ABAP servers and would like to know if there is a direct way of invoking RFC_PING and RFC_SYSTEM_INFO using the RFCSDK without logon depending on values of auth/rfc_authority_check. 

We are mainly using Python socket scripts and pysap library to craft the packets and evaluate the response. However we are unable to construct a valid packet that would enable the testing. We tried replaying packets sent from one system to another using the function modules without success. 

 

Did anyone work on a similar topic and would have some insights ? 

 

Many thanks in advance ! 

View Entire Topic
Ulrich_Schmidt
Product and Topic Expert
Product and Topic Expert

Yes, just add the connection parameter

LCHECK = 0

to the set of parameters used in the RfcOpenConnection() call, and a connection will be opened without user logon. RFC_PING can then be executed over this connection, as it requires no authorization. Not sure though about RFC_SYSTEM_INFO. But after executing RFC_PING, you can get almost the same information as returned by this function module, by calling RfcGetAttributes() on the established connection.

Ulrich_Schmidt
Product and Topic Expert
Product and Topic Expert
PS: don't know pyRfc, so I don't know the names of the Python wrappers of the NW RFC SDK functions. The names I gave above are the original C-function names. The Python wrappers will probably be named similarly.
Waelf
Discoverer
0 Kudos
Thanks for the details ! PyRFC is actually the opensource RFCSDK bindings for python. However the Open Source Program will not maintain it anymore so I guess I will just switch to using directly the SDK with C.